claude-flow

v3.10.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 9d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-framework agentic-rag agentic-workflow agents ai-agents

+14 more

ai-assistant ai-coding ai-skills autonomous-agents claude-code codex mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Affected surfaces

rce_ssrf breaking_upgrade

Summary

AI summary

Updates What shipped, CI validation, and Versions across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds cross‑platform Node shim for plugin hooks on Windows. Adds cross‑platform Node shim for plugin hooks on Windows. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Medium	Init-time platform detection writes .claude/settings.json to replace bash hooks with Node equivalents on Windows. Init-time platform detection writes .claude/settings.json to replace bash hooks with Node equivalents on Windows. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Adds static audit script to enforce no bash/POSIX‑only pipelines in plugin hooks. Adds static audit script to enforce no bash/POSIX‑only pipelines in plugin hooks. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Adds three new CI smoke jobs covering Ubuntu, macOS, and Windows‑latest for hook invocation. Adds three new CI smoke jobs covering Ubuntu, macOS, and Windows‑latest for hook invocation. Source: llm_adapter@2026-05-25 Confidence: high	—
Dependency	Low	Updates @claude-flow/cli to 3.10.1 and claude-flow to 3.10.1; updates ruflo to 3.10.2. Updates @claude-flow/cli to 3.10.1 and claude-flow to 3.10.1; updates ruflo to 3.10.2. Source: llm_adapter@2026-05-25 Confidence: high	—

Full changelog

Highlights

Windows plugin hooks now work natively without WSL / Git Bash (#2132).

Reporter @marioja documented every offending plugin hooks.json file: /bin/bash -c invocations, POSIX-only pipelines (jq, xargs -0, tr), and .sh shim scripts that crashed on native Windows with exit 126 ("cannot execute binary file").

What shipped

Node shim: new plugins/ruflo-core/scripts/ruflo-hook.cjs (and copies in .claude-plugin/scripts/ and plugin/scripts/) — cross-platform port of the bash shim, reads stdin JSON via Node, dispatches via child_process.spawn, always exits 0
Init-time platform detection: ruflo init on Windows now writes a .claude/settings.json that overrides plugin bash hooks with node-based equivalents
Mac/Linux unchanged: existing ruflo-hook.sh and plugin hooks.json byte-identical — Windows path is purely additive

CI validation

Static audit: scripts/audit-plugin-hooks-cross-platform.mjs enforces no /bin/bash, no POSIX-only pipelines, no .sh references in plugin hooks
3 new smoke jobs on ubuntu + macos + windows-latest matrix: shim invocation, init-generated settings, end-to-end hook execution (proves no exit-126)
Test baseline preserved: 1999 passing | 46 skipped throughout

Versions

All dist-tags (latest + alpha + v3alpha) updated.

🤖 Generated with RuFlo

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-flow

Get notified when new releases ship.

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →